I'm currently using WFC (Binisoft) now Malwarebyes, but it is lacking a few features. Features such as an advanced interactive menu which allows the user to allow or block an application for a period of time and customize the rule upon notification, HIPS protection, and true boot protection like OSS. I have noticed that WFC has allowed a few applications pass through and connect to the internet without notification. Application firewalls that I have used in the past were OSS, Eset, and Sygate and on MAC LittleSnitch which satisfied those requirements. Eset is not a viable alternative due to the fact they DO have a backdoor that they use... different discussion entirely.
you could try: free firewall- https://www.evorim.com/download/freefirewall-setup.exe comodo free firewall- https://download.comodo.com/cis/download/installs/1000/partners/cav_installer_138430010_1a.exe?af=7639 zonealarm free firewall- https://download.zonealarm.com/bin/free/1001_za/zafwSetupWeb_158_145_18590.exe these are the ones I tried and liked.
Comodo and zonealarm are junk. Zonealarm especially. Neither provide the features as the ones I mentioned which are no longer in development.
Not sure if you can find everything in one single program... FW+HIPS https://www.spyshelter.com/spyshelter-free/ https://www.wilderssecurity.com/threads/spyshelter-12.422366/page-7 They have recently resumed a free version HIPS https://rehips.com/en/ https://www.wilderssecurity.com/threads/rehips.364248/page-37#post-2959337 It's a very good HIPS and sandbox (thus the latter is free only up to 10 istances of the same process). FW with notifications http://www.sphinx-soft.com/Vista/index.html https://www.henrypp.org/product/simplewall
This is correct, it isn't a true firewall, it's more of an anti-logger with the ability to control outbound control. I used to like ZoneAlarm, but they ruined it when they changed the GUI years ago and it's too heavy compared with other solutions.
ReHIPS is very good, once you spend time figuring it out. It's still at version 2.4 with no evidence of a newer version coming out. I wonder if they're still active.
From WFC notification dialog you can define temporary rules that will allow/block programs for a certain amount of time. I wonder how this would be even possible since WFC does not filter any network traffic. Maybe Windows Firewall allowed a few applications, but from my experience, you can use Windows Firewall to block any inbound and outbound connection. However, this requires a little work from the user side.
I look forward to it. For me, ReHIPS was a challenge to learn, and I'm not sure I ever did, but I liked it and still have it on an older, seldom used laptop.
I use WFC in medium filtering mode. I think it detects almost everything, including Smartscreen, Runtime Broker, and Taskhostw. For any temporary inbounds, I usually choose one of the options, from 5 to 30 min (it shows up in the popup notification). For outbounds, I think the only option is to allow until the next firewall restart. I also use Firewall App Blocker, which shows what WFC blocked or allowed, to edit any entries (block or allow, or delete) in case I change my mind.
